Vulnerabilities

Summary — last 7 days

New vulnerabilities3,008▲ 385 vs. last week
Critical / high1,453▲ 24 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)237▲ 223 vs. last week
–

8 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.8)2.1%—Jensenofscandinavia Eagle 1200ac Firmware1/22/20247/9/2026
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter.
ModifiedMedium (6.1)0.77%—Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware4/3/20176/17/2026
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the return-url parameter to /goform/formLogout.
ModifiedMedium (6.1)0.79%—Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware4/3/20176/17/2026
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct Open Redirect attacks via the submit-url parameter to certain /goform/* pages.
ModifiedHigh (8.8)1.2%—Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware4/3/20176/17/2026
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to read passwords via a direct request to the x.asp page.
ModifiedHigh (8.8)0.56%—Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware4/3/20176/17/2026
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to conduct CSRF attacks via certain /goform/* pages.
ModifiedCritical (9.8)3.4%—Jensenofscandinavia Al3g FirmwareJensenofscandinavia Al5000ac FirmwareJensenofscandinavia Al59300 Firmware4/3/20176/17/2026
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary commands via shell metacharacters to certain /goform/* pages.
ModifiedHigh (8.8)2.9%—Jensenofscandinavia Air\3/26/20176/17/2026
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2)…
ModifiedHigh (7.5)3.0%—Foundstone Fscan6/18/20026/16/2026
Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.